Add 2-steps verification to MODX manager login. And front end login via pre-hook for "Login" extra.
If you like this Extra consider to